You found a list of SHA256 hashes in an intelligence report and search for them using the Hash Execution Search. What can be determined from the results?
A.
Identifies a detailed list of all process executions for the specified hashes
B.
Identifies hosts that loaded or executed the specified hashes
C.
Identifies users associated with the specified hashes
D.
Identifies detections related to the specified hashes
Answer is A, the hash is refer to the process and it will usually use for IOC management for the process.
compare A and B, A is asking "process" and B us asking "hosts loaded it", but A is better answer because "process execution" is before "host" and one host can be load the same process more than once.
Answer is A, the hash is refer to the process and it will usually use for IOC management for the process.
compare A and B, A is asking "process" and B us asking "hosts loaded it", but A is better answer because "process execution" is before "host" and one host can be load the same process more than once.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
3ffa7f1
5 months, 1 week agoalanalanalan
6 months agoalanalanalan
6 months agoDkdnfnfmdkdkd
8 months, 3 weeks agomlobo
9 months, 1 week agokangaru
9 months, 2 weeks agosbag0024
9 months, 3 weeks agoVasiOnCacao
11 months agowildbandana
11 months, 2 weeks agolightmagenta
11 months, 2 weeks ago